Lucene search
+L

273 matches found

Talos
Talos
added 2021/11/15 12:00 a.m.43 views

Lantronix PremierWave 2050 Web Manager FsUnmount OS command injection vulnerability

Summary An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Test...

9.9CVSS9.1AI score0.06061EPSS
SaveExploits1
Talos
Talos
added 2021/11/15 12:00 a.m.83 views

Lantronix PremierWave 2050 Web Manager FsBrowseClean directory traversal vulnerability

Summary A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to arbitrary file deletion. An attacker can make an authenticated HTTP request to trigger this vulnerability...

6.5CVSS5.7AI score0.02157EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.13 views

Lantronix PremierWave 2050 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded Wi-Fi module manufactured by Lantronix.The Web Manager FsTFtp feature of the Lantronix PremierWave 2050 8.9.0.0R4 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker with a specially crafted HTTP...

9.1CVSS6.1AI score0.02694EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.9 views

Lantronix PremierWave 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.9CVSS6AI score0.06061EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:00 a.m.35 views

Lantronix PremierWave 2050 Web Manager FsBrowseClean stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this...

9.3AI score
SaveExploits0
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.10 views

Lantronix PremierWave 2050 操作系统命令注入漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to cause arbitrary command execution...

9.1CVSS6AI score0.02915EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:00 a.m.45 views

Lantronix PremierWave 2050 Web Manager FsUnmount stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this...

9.9CVSS9.8AI score0.30436EPSS
SaveExploits1
Talos
Talos
added 2021/11/15 12:00 a.m.47 views

Lantronix PremierWave 2050 Web Manager Applications and FsBrowse local file inclusion vulnerability

Summary A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted series of HTTP requests can lead to local file inclusion. An attacker can make a series of authenticated HTTP requests to...

6.8CVSS5.3AI score0.01203EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/11/15 12:00 a.m.10 views

Lantronix PremierWave 路径遍历漏洞

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. Used to provide reliable and always-on 5G Wi-Fi connectivity, the Lantronix PremierWave 2050 is vulnerable to a path traversal vulnerability that can be exploited by attackers to cause local file inclusion...

7.2CVSS5.6AI score0.02386EPSS
SaveExploits1References3
Talos
Talos
added 2021/11/15 12:00 a.m.47 views

Lantronix PremierWave 2050 Web Manager SSL Credential Upload OS command injection vulnerabilities

Summary Multiple OS command injection vulnerabilities exist in the Web Manager SSL Credential Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these...

9.1CVSS10AI score0.02915EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2019:2050-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.08811EPSS
SaveExploits1References2
NVD
NVD
added 2021/01/20 3:15 p.m.20 views

CVE-2021-2050

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: E-Business Suite - XDO. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

7.6CVSS7.1AI score0.011EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/20 3:15 p.m.5 views

CVE-2021-2050

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: E-Business Suite - XDO. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

7.6CVSS7AI score0.011EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/01/20 2:50 p.m.17 views

CVE-2021-2050

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: E-Business Suite - XDO. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

7.6CVSS6.9AI score0.011EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/20 2:50 p.m.70 views

CVE-2021-2050

CVE-2021-2050 affects Oracle BI Publisher (E-Business Suite - XDO) within Oracle Fusion Middleware. Affected versions include 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability is exploitable by a low-privileged, unauthenticated attacker over HTTP, potentially leading to unauthor...

7.6CVSS7.3AI score0.011EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/13 12:00 a.m.43 views

Palo Alto Networks PAN-OS 8.1.x < 8.1.17 / 9.0.x < 9.0.11 / 9.1.x < 9.1.5 / 10.0.x < 10.0.1 Authentication Bypass Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.17 or 9.0.x prior to 9.0.11 or 9.1.x prior to 9.1.5 or 10.0.x prior to 10.0.1. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability exists in the GlobalProtect SSL VPN...

8.2CVSS7.7AI score0.01033EPSS
SaveExploits0References3
Circl
Circl
added 2020/11/12 2:30 a.m.12 views

CVE-2020-2050

creationtimestamp| type| source ---|---|--- 2020-11-12 02:30:57+00:00| seen| https://t.me/cibsecurity/16197...

8.2CVSS7.9AI score0.01033EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/12 12:05 a.m.130 views

CVE-2020-2050

This CVE concerns Palo Alto Networks PAN-OS GlobalProtect SSL VPN authentication bypass. The GlobalProtect SSL VPN component permits bypassing all client certificate checks with an invalid certificate, enabling a remote attacker to authenticate as any user and access restricted VPN resources when...

8.2CVSS8.4AI score0.01033EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2020/09/01 11:37 a.m.9 views

ncity-2050.com Cross Site Scripting vulnerability OBB-1292919

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/05/22 12:00 a.m.256 views

CentOS 7 : thunderbird (RHSA-2020:2050)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2050 advisory. - A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash...

10CVSS8.3AI score0.05803EPSS
SaveExploits0References6
Rows per page
Query Builder